Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa
File:                     3136382e39302e38382e302f32322d3332203d3e20323635323639.roa (raw, json)
Hash identifier:          N9NuThRm1Ni9pUtswJ0yNECL3UkCh84m8sjPbXzrljU=
Subject key identifier:   32:30:9F:35:32:05:B1:F4:37:85:7B:ED:39:30:A8:83:C9:03:E1:EB
Certificate issuer:       /CN=290AE1919BFEDA644BF63C9EEB85527735CA3614
Certificate serial:       33285673D571AF7B6A54C3E13ED67C295B9D9C41
Authority key identifier: 29:0A:E1:91:9B:FE:DA:64:4B:F6:3C:9E:EB:85:52:77:35:CA:36:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/290AE1919BFEDA644BF63C9EEB85527735CA3614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa
Signing time:             Sat 16 Nov 2024 15:41:12 +0000
ROA not before:           Sat 16 Nov 2024 15:36:12 +0000
ROA not after:            Sat 15 Nov 2025 15:41:12 +0000
asID:                     265269
IP address blocks:        168.90.88.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:28:56:73:d5:71:af:7b:6a:54:c3:e1:3e:d6:7c:29:5b:9d:9c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290AE1919BFEDA644BF63C9EEB85527735CA3614
        Validity
            Not Before: Nov 16 15:36:12 2024 GMT
            Not After : Nov 15 15:41:12 2025 GMT
        Subject: CN=32309F353205B1F437857BED3930A883C903E1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:86:d7:aa:f6:fc:4e:d2:45:7c:d5:c8:89:
                    ce:e0:77:79:88:6d:72:ff:46:3d:79:9e:ce:30:e3:
                    f4:ea:51:0d:bb:db:d2:6b:9c:8a:6b:75:df:13:5f:
                    50:f9:42:6a:7c:04:e2:be:d0:50:5b:e1:57:ac:ae:
                    0d:08:ee:03:cb:80:80:e9:98:59:38:50:08:a7:30:
                    4a:16:ff:c9:20:a7:dd:6e:4e:3c:7a:7d:e4:fc:cc:
                    cc:61:eb:41:26:18:c6:de:ff:eb:6e:c9:16:25:71:
                    d5:05:0e:60:2c:b7:1e:85:4c:a5:cb:22:b4:c7:89:
                    21:ae:9c:7f:27:6e:c4:c0:92:5f:01:ae:17:2c:d2:
                    b4:5c:35:92:4c:c3:0e:c3:b2:4c:49:f4:e2:df:83:
                    8f:ad:de:f4:53:02:ab:d9:b0:ad:55:3a:3f:fb:17:
                    b5:8c:78:d0:4e:81:3d:44:b8:22:0c:bc:ec:2f:36:
                    9b:4b:88:c9:9d:50:e4:50:d6:54:31:d7:ec:43:e2:
                    52:56:fd:2c:22:b8:22:5b:00:b6:a3:3f:7d:ce:4c:
                    21:3f:6c:28:af:ca:00:e0:56:23:f2:d6:61:c1:ae:
                    dc:78:b8:fa:dd:c9:a7:f5:df:19:b8:43:de:7f:03:
                    bd:4e:0d:13:21:74:54:71:a7:c7:8d:41:ed:de:6f:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:30:9F:35:32:05:B1:F4:37:85:7B:ED:39:30:A8:83:C9:03:E1:EB
            X509v3 Authority Key Identifier:
                keyid:29:0A:E1:91:9B:FE:DA:64:4B:F6:3C:9E:EB:85:52:77:35:CA:36:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/290AE1919BFEDA644BF63C9EEB85527735CA3614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/290AE1919BFEDA644BF63C9EEB85527735CA3614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:9d:62:72:c7:92:35:54:b2:0d:30:36:89:9d:53:76:44:99:
         54:1f:83:8c:8f:e8:d4:a5:cf:95:d6:50:01:45:c5:4d:24:e8:
         02:81:de:25:07:ee:3b:b9:b0:56:84:0a:0e:ee:25:00:e4:64:
         97:54:87:ef:59:d3:d3:55:92:3b:e4:10:7a:ec:0a:ad:30:c8:
         04:0f:29:aa:af:0f:ad:9e:35:a4:4a:47:d5:05:d1:0a:33:85:
         2f:21:1f:46:dd:15:77:4d:61:89:40:ce:25:bb:37:c5:10:4c:
         87:73:f2:4e:59:9c:ee:d0:07:e0:8a:ae:fb:52:ab:e5:3c:38:
         06:eb:4e:39:2e:cb:d8:46:bc:2a:33:e2:92:93:8b:83:3c:07:
         cf:67:ac:c1:31:af:36:2d:f1:0d:2f:dd:8c:1d:11:c9:9e:5d:
         95:e1:a7:df:a8:57:37:56:e0:fd:7e:7d:5f:93:ae:6b:7a:b9:
         e1:69:79:1d:13:0c:eb:c7:4e:10:c6:19:df:48:2d:29:65:b8:
         0e:9c:b7:86:7c:17:2b:84:a3:32:7c:82:0c:7f:5a:d4:96:dd:
         b7:8b:99:05:7c:6a:14:3d:b7:30:8c:da:8e:e9:63:b5:e0:34:
         04:4f:5d:2c:8b:d8:32:76:b5:bf:2c:c2:8b:6e:cf:a7:43:4b:
         3a:f9:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:17:12 2024 by rpki-client on console-fra.rpki-client.org